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1 This action is in response to the communication filed on 9/22/2006, 

2 DETAILED ACTION 

3 Continued Examination Under 3 7 CFR LI 14 

4 . . 

5 A request for continued examination under 37 CFR 1.114, including the fee set forth in 



6 37 CFR 1. 17(e), was filed in this application after final rejection. Since this application is 

7 eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) 

8 has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 

9 37 CFR 1,114. Applicant's submission filed on 8/24/2006 has been entered. 

1 0 Response to Arguments 

1 1 Regarding applicants' argument that Saito did not teach providing information indicative 

12 of receipt of valid digital credential information from the relying party, the examiner does not 

13 find the argument persuasive, Saito teaches that when the certificate is valid, access control 

14 information of the user including ciphered user ID, password, and access level is transmitted 

15 from authentication server 2 to appUcation server 6. Then when the application server verifies 

16 the access control information from the authentication server, an accept message is transmitted to 



17 the cUent. Because the access control information is not sent to the application server if unless 

18 the certificate was determined to be valid, the access control information is therefore "indicative" 

19 of a valid certificate. Similarly, the access control information is not verified by the application 

20 server if the certificate is not vaUd, and thus the client would not receive the accept message if 

2 1 the certificate was not valid. As such, the accept message is indicative that the certificate was 

22 valid. Therefore, the examiner does not find the argument persuasive. 
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1 All objections and rejections not presented below have been withdrawn. 

2 Claims 42-46, 48-54, 56-62, and 64-65 have been examined. 

3 Information Disclosure Statement 

4 The information disclosure statement (IDS) submitted on 9/22/2006 was filed with the 

5 Request for Continued Examination. The submission is in compliance with the provisions of 37 

6 CFR 1.97. Accordingly, the information disclosure statement is being considered by the 

7 examiner. 

8 Claim Rejections - 35 USC §103 

9 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

10 obviousness rejections set forth in this Office action: 

1 1 A patent may not be obtained though the invention is not identically disclosed or 

12 described as set forth in section 102 of this title, if the differences between the subject 

1 3 matter sought to be patented and the prior art are such that the subject matter as a 

14 whole would have been obvious at the time the invention was made to a person having 

1 5 ordinary skill in the art to which said subject matter pertains. Patentability shall not be 

1 6 negatived by the manner in which the invention was made. 

1 8 Claims 42-46, 48-54, 56-62, and 64-65 are rejected under 35 U.S.C. 103(a) as being 

1 9 unpatentable over Sheehan et al. (US Patent Number 6,3 1 1, 1 63) hereinafter referred to as 

20 Sheehan, and further in view of Saito et al. (US Patent Number 6,275,941) hereinafter referred to 

21 as Saito, and further in view of State of Colorado (Senate Bill 97134 LLS NO, 970530.01) 

22 hereinafter referred to as Colorado. 

23 Regarding claims 42, 50 and 58, Sheehan disclosed a system, method, and software for a 

24 prescribing party to issue a prescription throligh a communication network such as the Internet, 

25 in which the prescribing party includes doctors, health service providers, and other authorized 

26 personnel (See Sheehan Abstract and Col. 3 Lines 45-57, CoL 4 Lines 47-49, and Fig. 4 ). 
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1 However, Sheehan failed to disclose a method for ensuring that the prescribing party was in fact 

2 authorized to issue prescriptions, or checking the professional license status information of the 

3 prescribing party. 

4 Colorado teaches that in order to write a prescription in the state of Colorado, an 

5 advanced practice nurse must be listed on the advanced practice registry, have a license in good 

6 standing without disciplinary sanctions, and have fulfilled requirements established by the board 

7 (See Colorado Section 7). 

8 . Saito teaches a system for authenticating a user in a network (See Saito Fig. 5 and Col. 7 

9 Lines 5-55) involving storing authentication information for a plurality of users (See Saito Col. 7 

10 Lines 25-26 wherein the public keys of users must have been stored in order for them to be 

1 1 accessed by the authentication server); at an authentication service (authentication server), 

12 receiving digital credential information (integrated certificate) associated with a first user (client) 

13 from a relying party (application server) (See Saito Col. 7 Lines 21-24); verifying the digital 

14 credential information associated with the first user to the relying party (See Saito Col. 7 Lines 

1 5 25-36); providing verification information associated with the first user to the relying party (See 

16 Saito Col. 7 Lines 36-52); and providing information from the authentication service to the first 

1 7 user, the information indicative of receiving the digital credential information associated with the 

1 8 first user from the relying party (See Saito Col. 7 Lines 36 - Col 8 Line 8). Saito further teaches 

19 providing information to the first user comprises providing access to an activity log associated 

20 with the first user (See Saito Col. 8 Lines 3-5 and 36-44). 

21 It would have been obvious to the ordinary person skilled in the art at the time of 

22 invention to employ the teachings of Colorado in the prescribing party authorization system of 
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1 Sheehan by checking the standing of the medical license of the party, whether they are registered 

2 on the advance practice registry, and the status of fulfillment of the requirements established by 

3 the board. This would have been obvious because the ordinary person skilled in the art would 

4 have been motivated to validate that all legal requirements for issuing prescriptions were fulfilled 

5 prior to authorizing the party to issue prescriptions. 

6 It further would have been obvious to the ordinary person skilled in the art at the time of 

7 invention to employ the teachings of Saito in the network prescription issuing system of Sheehan 

8 and Colorado by having the prescribing doctor send an integrated certificate to the server, and 

9 having the server authenticate the certificate and doctor via an authentication server, and to 

1 0 verify the legal requirements for issuing a prescription as taught by Colorado. This would have 

1 1 been obvious because the ordinary person skilled in the art would have been motivated to ensure 

1 2 that only authorized doctors were issuing prescriptions. 

13 Regarding claims 43, 51, and 59, the combination of Sheehan, Colorado and Saito 

14 disclosed providing access to an activity log associated with the first user (See Saito Col. 8 Lines 

15 3-5 and 36-44). 

16 Regarding claims 44-45, 52-53, and 60-61, the combination of Sheehan, Colorado, and 

17 Saito disclosed that the professional license status information comprises registration information 

18 indicative of a professional license registration status with a registration authority (See Colorado 

19 Section 7), and the method further comprises, prior to providing the verification information to 

20 the relying party, verifying the registration information with the registration authority (See 

21 Colorado Section 7 and the rejection of claim 42 above). 
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1 Regarding claims 46, 54, and 62, the combination of Sheehan, Colorado, and Saito 

2 disclosed storing access information associated with the relying party, the access information 

3 including information indicative of the providing the verification information (See Saito Col. 7 

4 Lines 44-52); and providing the access information to the relying party (See Saito Col. 7 Lines 

5 44-52). 

6 Regarding claims 48, 56, and 64, the combination of Sheehan and Saito disclosed that the 

7 providing verification information to the relying party comprises providing information 

8 indicative of a failure to authenticate the digital credential information associated with the first 

9 user (See Saito Col. 7 Lines 36-38). 

10 Regarding claims 49, 57, and 69, the combination of Sheehan and Saito disclosed at least 

1 1 one of the relying party and the authentication service issuing a challenge in response to 

12 receiving digital credential information associated with the first user (See Saito Col. 7 Lines 21- 

13 24). 

14 Conclusion 

15 Claims 42-46, 48-54, 56-62, and 64-65 have been rejected. 

16 Any inquiry concerning this communication or earlier communications from the 

17 examiner should be directed to Matthew T. Henning whose telephone number is (571) 272-3790. 

1 8 The examiner can normally be reached on M-F 8-4, 

1 9 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

20 supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 

21 organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 



2 Application Information Retrieval (PAIR) system. Status information for published applications 

3 may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

4 applications is available through Private PAIR only. For more information about the PAIR 

5 system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

6 system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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